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Amendments to the Claims : 
This listing of claims replaces all prior versions and listings of claims in the application: 

Listing of Claims : 

1 . (currently amended) A method comprising: 

is 

generating information, at first and second points of a network, about unwanted 
communications that are adapted to substantially reduce the ability of a target device to 
respond to other communications; and 

analyzing the information generated at the first and second points to identify which of 
the points first carried the unwanted communications. 

2. (original) The method of claim 1, also including detecting the direction of the 
unwanted communications. 

3. (original) The method of claim 1, also including identifying the target device. 

4. (original) The method of claim 1, also including statistically analyzing the 
communications to determine if an uncharacteristically large number of communications 
have passed through at least one of the network points. 
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5. (original) The method of claim 1, also including statistically analyzing the 
communications to determine when an uncharacteristically large number of communications 
have been targeted toward the target device. 

6. (original) The method of claim 1, also including correlating communications 
request messages with acknowledgement messages. 

7. (original) The method of claim 1, also including communicating information 
about the unwanted communications to brokers. 

8. (original) The method of claim 7, also including communicating information 
about the unwanted communications among brokers. 

9. (original) The method of claim 1 , also including blocking a portion of 
communications passing through the point through which the unwanted communications 
originated. 

10. (original) The method of claim 9, also including blocking a portion of 
communication request messages passing through the point through which the unwanted 
communications originated. 

1 1 . (original) The method of claim 1 , in which the target device comprises a web 

server. 

12. (currently amended) A method comprising: 
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identifying a source sub-network of unwanted communications that are adapted to 
substantially reduce the ability of a target device on a network to respond to other 
communications, the source sub-network connected to the network through an interface 
device; and 

blocking communications passing through the interface device. 

13. (original) The method of claim 12, also including blocking a portion of the 
communications passing through the interface device. 

14. (original) The method of claim 13, also including blocking a portion of 
communication request messages passing through the interface device. 

15. (original) The method of claim 12, also including monitoring communications 
passing through at least a first point and second point on a path from the source sub-network 
to the target device. 

16. (original) The method of claim 15, also including analyzing the 
communications passing through the first and second points for indicia of unwanted 
communications. 

17. (original) The method of claim 16, also including statistically analyzing the 
communications passing through the first and second points for an uncharacteristically large 
number of communications passing through either point. 
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18. (original) The method of claim 16, also including statistically analyzing the 
communications passing through the first and second points for an uncharacteristically large 
number of communication request messages passing through either point. 

19. (original) The method of claim 16, also including correlating communication 
request messages passing though the first and second points with acknowledgement 
messages. 

20. (original) A system comprising: 

first and second interface devices for detecting and generating information about 
unwanted messages directed to a target device; and 

a communications analyzer for analyzing the information generated at the first and 
second interface devices to identify which of the interface devices first carried the unwanted 
communications. 

2 1 . (original) The system of claim 20, in which the communications analyzer also 
includes: 

an interface monitor corresponding to each interface device; and 
a communications link between the interface monitors. 

22. (original) The system of claim 21, in which the communications analyzer also 
includes a statistics analyzer corresponding to each interface device for statistically analyzing 
the messages that pass through each interface device. 
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23. (original) The system of claim 22, also including an interface coordinator 
associated with each interface device for instructing the interface devices to block messages. 

24. (original) A system comprising: 

a communications monitor for detecting and generating information about unwanted 
messages originating on a first network and directed to a target device on a second network; 
and 

a gating module for blocking messages passing from the first network to the second 
network. 

25. (original) The system of claim 24, in which the communications monitor 
includes a plurality of interface monitors for monitoring the passage of messages through a 
plurality of network points. 

26. (original) The system of claim 25, in which the communications monitor also 
includes a localizer to identify the network point that first carried the unwanted messages. 



27. (original) The system of claim 26, in which the communications monitor also 
includes a statistics analyzer for statistically analyzing the messages passing through the 
plurality of points. 

28. (original) The system of claim 24, in which the gating module is operable to 
block a portion of the messages passing from the first network to the second network. 
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29. (original) The system of claim 28, in which the gating module is operable to 
block a percentage of all messages passing from the first network to the second network. 

30. (original) The system of claim 28, in which the gating module is operable to 
block a portion of communication request messages directed to the target device, 

3 1 . (currently amended) A computer program embodied in a computer readable 
medium, the program capable of configuring a computer to: 

generate information, at first and second points of a network, about unwanted 
communications that are adapted to substantially reduce the ability of a target device to 
respond to other communications; and 

analyze the information generated at the first and second points to identify which of 
the points first carried the unwanted communications. 

32. (original) The program of claim 3 1 , also capable of configuring a computer 
to block a portion of the communications passing through the point that first carried the 
unwanted communications. 

33. (currently amended) A computer program embodied in a carrier wave, the 
program capable of configuring a computer to: 

generate information, at first and second points of a network, about unwanted 
communications that are adapted to substantially reduce the ability of a target device to 
respond to other communications; and 
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analyze the information generated at the first and second points to identify which of 
the points first carried the unwanted communications. 

34. (original) The program of claim 33, also capable of configuring a computer 
to block a portion of the communications passing through the point that first carried the 
unwanted communications. 
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